Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File: d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier: HGDDrlOd/lhL8y2E+tW3a/d/8kCOyReQibNsFMOcWQo=
Subject key identifier: 71:56:71:9E:5D:D2:CD:65:BB:BF:EA:40:FD:8A:5D:DE:09:82:18:0E
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019D382E5ECAE0BA270879A7130483D87537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number: 114F
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: 8uxK8wNO8shNIRs+I0gmWAe47BtqXK8/onDES1IwTZw=)
3: k7SwSm-lR2tiZUN1enrqRZh95B0.roa (hash: F4SSqixujMFRC8AtyIaRgNjOXkxcmSPAezm1/5O7V+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5e:ca:e0:ba:27:08:79:a7:13:04:83:d8:75:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=7156719e5dd2cd65bbbfea40fd8a5dde0982180e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:e4:c8:14:79:ca:58:2b:be:c1:f5:86:71:
41:0f:b1:6d:ab:dd:8e:1d:8d:cf:77:b5:78:09:1e:
ff:62:d5:4b:b7:67:c8:70:c6:eb:fc:e1:8a:2c:d3:
0e:13:b6:18:d1:ae:0b:37:8b:24:4f:e3:65:55:5a:
24:63:b2:06:1e:72:54:5b:56:1f:21:b9:78:88:c2:
bf:92:96:87:2f:93:77:89:a8:b3:17:94:43:f7:e5:
78:a8:b9:f2:ed:7d:1a:4b:c3:52:5f:83:eb:af:bb:
3c:1a:23:f2:be:a5:42:b4:1d:51:00:4d:53:a7:97:
64:54:c1:37:3f:34:4a:85:6e:75:68:2c:9d:db:cd:
b5:b7:01:a1:25:7b:3d:b2:43:88:44:6e:f7:b7:97:
0b:b4:99:16:c9:99:fe:85:d9:87:2d:74:c3:41:9f:
0d:e0:3e:f0:2c:5a:19:31:58:31:e6:8b:1e:65:c2:
32:96:54:16:7a:4f:2b:f7:44:2f:ed:35:43:fd:49:
24:c8:73:64:a7:73:8f:47:49:e0:85:5b:5c:49:51:
1b:52:20:81:0d:c0:39:91:9f:ef:a0:52:69:13:07:
80:58:a7:c7:7a:62:8a:41:45:5b:0d:33:49:17:d9:
53:f5:ca:8b:b5:eb:32:cd:d7:af:f9:4b:ed:16:b2:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:56:71:9E:5D:D2:CD:65:BB:BF:EA:40:FD:8A:5D:DE:09:82:18:0E
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:60:0c:a1:78:31:4e:07:08:9c:4a:c8:28:ca:fd:8c:07:ee:
5a:05:25:b0:a7:4e:64:3b:cb:5c:8d:56:92:dd:f2:e6:a5:5c:
02:ce:ec:fa:bc:8c:12:cf:a4:f4:c4:d1:a6:6c:15:03:31:82:
84:c5:75:26:5f:6f:fb:e4:4c:28:48:95:c3:0b:0a:77:6e:b2:
be:19:99:29:4d:4d:0c:d8:6d:88:b9:7e:8e:75:0b:59:0a:1d:
47:22:52:c3:a4:5b:a9:5b:50:10:60:a8:41:69:08:7e:fb:a7:
42:fd:d2:97:e8:5d:fe:c5:54:9e:6a:e8:51:7f:b9:a0:a9:48:
1d:d0:cd:a8:cf:7d:e3:a7:90:4d:e8:2e:30:1f:10:f2:04:a9:
97:8c:09:41:87:8b:9b:d5:5a:bd:33:cb:68:e5:a0:b4:7d:18:
40:54:17:d5:d7:9c:c2:a8:15:9f:c0:09:18:a5:01:c1:23:60:
18:a9:a4:4e:8b:9a:77:21:34:f7:70:66:fd:c5:64:e2:b7:a4:
71:06:9e:42:b3:5e:ec:6f:b2:40:6f:bb:80:f6:dc:66:60:26:
f7:af:a3:bd:26:75:2d:ea:d4:ab:28:14:48:a4:76:21:65:3e:
fb:57:5b:33:be:75:91:f0:0e:dd:e1:59:c0:e3:51:e6:02:28:
56:e4:a1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:16 2026 by rpki-client